PT-2026-67431 · Textplus · Text Message/Call App

Actuator · CVE-2026-18604 · Publicado 2026-08-03 · Atualizado 2026-08-03

NVD

CVSS v2.0

4.3

Média

Vetor base

AV:L/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

Exploit

Correção

Enumeração de Fraquezas

CWE-926

Identificadores relacionados

CVE-2026-18604

Produtos afetados

Text Message/Call App

Referências · 6

• 🔥 https://github.com/actuator/com.gogii.textplus · Exploit
• https://vuldb.com/vuln/385527/cti · Nota
• https://vuldb.com/submit/851700 · Nota
• https://vuldb.com/vuln/385527 · Nota
• https://vuldb.com/cve/CVE-2026-18604 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-18604 · Nota de Segurança